环境说明

操作系统：Ubuntu 20.04.4 LTS
内核版本：5.4.0-104-generic
openssh版本：OpenSSH_8.2p1
openssl版本：OpenSSL 1.1.1f 31 Mar 2020

升级openssh至8.9

  1. # 准备编译环境
  2. apt-get install libpam0g-dev gcc zlib1g-dev libssl-dev make -y
  4. # 【openssh】
  5. # 下载
  6. wget https://mirrors.aliyun.com/pub/OpenBSD/OpenSSH/portable/openssh-8.9p1.tar.gz
  7. tar xf openssh-8.9p1.tar.gz
  8. cd openssh-8.9p1
  9. # 隐藏版本号
  10. sed -i 's/OpenSSH_8.9/OpenSSH_899/g' version.h
  12. # 编译安装
  13. ./configure --prefix=/usr/local/myssh_8.9p1 \
  14. --sysconfdir=/usr/local/myssh_8.9p1/ssh \
  15. --with-privsep-user=sshd --with-zlib  \
  16. --with-pam \
  17. --without-openssl-header-check
  19. make && make install
  21. # 备份openssh
  22. mv /usr/sbin/sshd /usr/sbin/sshd.bak_`date '+%Y-%m-%-d_%H:%M:%S'`
  23. mv /etc/ssh/sshd_config /etc/ssh/sshd_config.bak_`date '+%Y-%m-%-d_%H:%M:%S'`
  26. # 创建软连接 
  27. ln -s /usr/local/myssh_8.9p1/sbin/sshd /usr/sbin/sshd
  28. ln -s /usr/local/myssh_8.9p1/ssh/sshd_config /etc/ssh/sshd_config
  30. # 避开安全扫描
  31. echo "Protocol 2" >> /usr/local/myssh_8.9p1/ssh/sshd_config
  32. echo "Banner /etc/ssh_banner" >> /usr/local/myssh_8.9p1/ssh/sshd_config
  34. systemctl restart sshd